Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/BeOlXIV6gWmhd5mv5KB5OZBFGSk.roa
File: BeOlXIV6gWmhd5mv5KB5OZBFGSk.roa (raw, json)
Hash identifier: 3pcRPT3TGxmpm1dBGgL1x+BWX41NlkCHrltB4RA7mm8=
Subject key identifier: 05:E3:A5:5C:85:7A:81:69:A1:77:99:AF:E4:A0:79:39:90:45:19:29
Certificate issuer: /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial: 06D6FC6D
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/BeOlXIV6gWmhd5mv5KB5OZBFGSk.roa
Signing time: Wed 25 May 2022 00:49:14 +0000
ROA not before: Wed 25 May 2022 00:49:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 37.156.226.0/24 maxlen: 24
93.113.31.0/24 maxlen: 24
87.121.136.0/21 maxlen: 24
185.137.36.0/22 maxlen: 24
62.245.0.0/19 maxlen: 24
94.176.96.0/24 maxlen: 24
93.114.129.0/24 maxlen: 24
86.106.135.0/24 maxlen: 24
89.44.77.0/24 maxlen: 24
46.102.116.0/24 maxlen: 24
31.177.0.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114752621 (0x6d6fc6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
Validity
Not Before: May 25 00:49:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05e3a55c857a8169a17799afe4a0793990451929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5d:32:53:52:c1:cc:5d:91:19:e1:71:2d:b9:
d7:8c:dd:59:6f:0d:18:9d:41:95:12:ca:78:fd:44:
fe:c2:b7:dd:32:e8:ae:43:2f:30:5d:e7:26:f6:bc:
87:3e:35:ad:a0:30:f1:c9:52:f2:af:69:33:b5:0a:
12:11:c8:e1:89:c2:3c:73:25:94:93:ea:3d:5c:b2:
95:a6:9c:df:12:11:c3:7d:27:c4:51:3a:27:00:66:
f3:6d:03:75:fe:6e:67:ec:e0:e9:90:de:8a:f5:4f:
50:69:95:e7:05:56:4b:75:9e:b2:1b:45:85:1b:0d:
5f:75:73:36:33:73:1f:f5:f4:ac:29:ef:c4:9c:01:
ed:d7:ed:e5:e2:4a:eb:75:dd:67:09:b9:a0:a2:03:
4b:a4:ba:aa:c0:75:6b:ce:f0:f5:78:5f:75:ee:6f:
33:71:71:f9:70:5e:f7:c3:cc:98:53:c6:6c:5c:69:
38:39:d9:ba:67:60:b1:9a:01:00:10:4a:49:dd:1f:
00:7c:f9:a3:e1:96:9f:ef:ee:aa:05:72:48:95:a9:
ac:57:8e:23:9d:1e:c4:06:cb:3f:1c:ab:22:f4:84:
18:76:d0:65:bd:de:09:45:a7:9a:2e:27:ca:3b:5c:
54:44:69:fc:bc:28:f6:f2:41:b3:82:39:68:bc:f9:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E3:A5:5C:85:7A:81:69:A1:77:99:AF:E4:A0:79:39:90:45:19:29
X509v3 Authority Key Identifier:
keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/BeOlXIV6gWmhd5mv5KB5OZBFGSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.0.0/21
37.156.226.0/24
46.102.116.0/24
62.245.0.0/19
86.106.135.0/24
87.121.136.0/21
89.44.77.0/24
93.113.31.0/24
93.114.129.0/24
94.176.96.0/24
185.137.36.0/22
Signature Algorithm: sha256WithRSAEncryption
01:57:f6:dc:16:63:45:4d:cf:2a:87:7f:b1:75:ea:b4:cb:a5:
3a:58:51:a1:b7:dd:8f:bf:88:af:ab:2a:0b:6d:e9:7b:27:90:
29:43:2c:6a:5a:d0:4c:a2:33:1b:ea:b3:14:99:c7:5b:fe:3a:
d2:42:58:33:66:68:ff:a9:46:bd:0f:d1:17:32:b2:fd:83:ee:
3d:32:bb:50:b5:9c:d3:84:3b:fa:05:46:ac:9a:d1:05:c2:5b:
db:44:1c:5a:79:f5:53:73:9a:73:ea:ea:67:ef:85:0b:d0:24:
5b:45:49:2c:f0:c6:a7:da:78:a9:cb:30:b2:d6:d8:cc:de:36:
4f:59:b6:20:b9:ae:bb:7e:8f:e2:ba:4c:1b:6a:91:28:d9:9f:
7a:b1:3d:5d:c9:a8:93:aa:1f:be:2d:3f:90:fb:a8:12:ea:85:
70:c0:f9:55:c5:34:04:0e:58:86:e2:8b:f7:0d:31:f1:c8:f4:
0a:55:a2:9a:6c:76:3f:d7:d0:b5:69:d2:92:35:7c:e4:e0:80:
e5:08:75:e4:7c:26:95:64:69:9d:57:1a:dc:e5:0b:1f:13:9b:
ae:da:94:a3:39:3d:d4:68:65:78:5c:1f:f5:bb:76:a1:5a:13:
2d:49:3d:a0:cc:3d:9f:f4:43:de:85:09:af:af:20:99:58:b6:
55:c7:fe:b8
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgIEBtb8bTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
NzlhNzVkZWJkNjUzNTlhNDUzMTdmMjAzZjExYTMyMWUxNGIyZjJjMB4XDTIyMDUy
NTAwNDkxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMDVlM2E1NWM4NTdh
ODE2OWExNzc5OWFmZTRhMDc5Mzk5MDQ1MTkyOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOVdMlNSwcxdkRnhcS2514zdWW8NGJ1BlRLKeP1E/sK33TLo
rkMvMF3nJva8hz41raAw8clS8q9pM7UKEhHI4YnCPHMllJPqPVyylaac3xIRw30n
xFE6JwBm820Ddf5uZ+zg6ZDeivVPUGmV5wVWS3WeshtFhRsNX3VzNjNzH/X0rCnv
xJwB7dft5eJK63XdZwm5oKIDS6S6qsB1a87w9Xhfde5vM3Fx+XBe98PMmFPGbFxp
ODnZumdgsZoBABBKSd0fAHz5o+GWn+/uqgVySJWprFeOI50exAbLPxyrIvSEGHbQ
Zb3eCUWnmi4nyjtcVERp/Lwo9vJBs4I5aLz5PisCAwEAAaOCAkUwggJBMB0GA1Ud
DgQWBBQF46VchXqBaaF3ma/koHk5kEUZKTAfBgNVHSMEGDAWgBRnmnXevWU1mkUx
fyA/EaMh4UsvLDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1o1cDEzcjFsTlpwRk1YOGdQeEdqSWVGTEx5dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjUvN2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8x
L0JlT2xYSVY2Z1dtaGQ1bXY1S0I1T1pCRkdTay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUv
N2EzOWIxLTFkMWMtNDkxOS1iMTljLTNlZWJlNzE5Njk3Mi8xL1o1cDEzcjFsTlpw
Rk1YOGdQeEdqSWVGTEx5dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBb
BggrBgEFBQcBBwEB/wRMMEowSAQCAAEwQgMEAx+xAAMEACWc4gMEAC5mdAMEBT71
AAMEAFZqhwMEA1d5iAMEAFksTQMEAF1xHwMEAF1ygQMEAF6wYAMEArmJJDANBgkq
hkiG9w0BAQsFAAOCAQEAAVf23BZjRU3PKod/sXXqtMulOlhRobfdj7+Ir6sqC23p
eyeQKUMsalrQTKIzG+qzFJnHW/460kJYM2Zo/6lGvQ/RFzKy/YPuPTK7ULWc04Q7
+gVGrJrRBcJb20QcWnn1U3Oac+rqZ++FC9AkW0VJLPDGp9p4qcswstbYzN42T1m2
ILmuu36P4rpMG2qRKNmferE9Xcmok6ofvi0/kPuoEuqFcMD5VcU0BA5YhuKL9w0x
8cj0ClWimmx2P9fQtWnSkjV85OCA5Qh15HwmlWRpnVca3OULHxObrtqUozk91Ghl
eFwf9bt2oVoTLUk9oMw9n/RD3oUJr68gmVi2Vcf+uA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org